Enrolling devices

Domain
Name : Choose the Domain Name from the drop down, if you do
not have any domain name, select Default
Workgroup

User
Name- Enter the user's name whose device needs to be enrolled.

Email
address : It is mandatory to enter the e-mail address of the
user who will receive the enrollment request.

Platform:
Specify the platform from the drop down menu, as Android.

Owned
By : Owner of the device either Corporate
or Personal

Assign
to Group : Specify the group to which the device should be
added. If you select an existing group from the drop down, then the
newly added device will automatically get all the Apps and profiles
which were already distributed to the group. By doing so you can automate
the process of imposing the minimum required restrictions and Apps
to all the newly added devices.

If required, enable the
check box stating "Automatically
distribute license if it is a KNOX enabled device", which
is displayed. This will make license distribution as automatic for
KNOX devices enrolled henceforth.

Click Enroll
to enroll the device.

If you add a new group name, then a new group will be created
and the device will be added to it.

(Applicable only for MDM On-Premises) Ensure that you configure your Proxy
settings, and the mail
server settings, so that you the user can receive the email
with the OTP.

End users will receive an e-mail with the
enrollment instructions and the link to enroll the devices. Based on the
authentication policy defined for enrollment, users will be receiving
the OTP. Users need to manually install the
MDM profile by clicking on the enrollment request. All enrolled devices
will be listed in the Devices Tab
in the Mobile Device Manager Plus console under Groups
and Devices.

Enrolling
additional devices for same user

You can enroll multiple devices for
the same user. In case a user has more than one mobile device that needs
to be managed, you can enroll those devices by following the steps mentioned
below;

On the web console, navigate
to Enrollment

Under Enrollment
tab choose the User Name
to whom you wanted to enroll the additional device

Under Actions click
button

Specify the Platform
as iOS or Android

Specify the Owned
By type as Corporate or Personal and click Enroll

The mail to enroll additional device would be sent to the specified
user.

Bulk Enrollment

This option facilitates you to enroll many
devices at the same time. You can simply create a csv file with the User
Name, Domain Name, Email, Platform and Owned by details and upload the
same. Multiple entries should be in separate lines. Refer the below mentioned
csv file for example,

Sample CSV Format

USER_NAME,DOMAIN_NAME,EMAIL_ADDRESS,PLATFORM_TYPE,OWNED_BY,GROUP_NAME, ANDREW,,andrew@mobiledevicemanagerplus.com,Android,,Android_Group, BEN,ZOHOCORP,ben@mobiledevicemanagerplus.com,Android,Corporate,Android_Group,Note
: 1.
The CSV file should contain the following fields: User Name, Domain Name,
Email Address, Platform Type, Owned By, Group Name. 2.
The fields User Name, Email Address and Platform Type are mandatory. All
the other fields are optional. If not provided, default values will be
taken.

3.
The default values for various non-mandatory fields are: Domain
Name -- MDM Owned
By -- Corporate Group
Name -- Default Group for given Owned By & Platform Type. 4.
The first line of the CSV is the column header and the columns can be
in any order. 5.
Blank column values should be comma separated. 6.
If the column value contains comma, it should be specified within quotes.

Click Bulk
Enrollment. A window opens, click Browse
to upload the created CSV file and Import
the same.

Enrollment mail will be sent to all the users listed in the csv file.

Enrollment
Process on KNOX devices

The users, upon receiving
the enrollment requests, can enroll their device as mentioned below:

User needs to copy the Server Name,
Port Number and OTP given in the e-mail. On the user's device an
ME MDM App that has been exclusively designed for SAFE and KNOX devices
will be downloaded. ME MDM App for SAFE and KNOX devices has advanced
management capabilities unlike normal android devices.

Users will receive a mail
for enrollment and will have to click on the link in the e-mail, to
start the enrollment process.

Mobile
Device Manager Pluswill recognize
the device as normal android device, SAFE device or KNOX device including
the version of Android (Android 4.2 and above or below), then the
user will be automatically directed to the App's PlayStore page and
the appropriate App for KNOX (ME MDM App for Android 4.2 and above)
can be downloaded. If Mobile Device Manager Plus is unable to identify the device, user
will be provided with a link which explains the list of SAFE and KNOX
devices. User can refer to the link and then choose to download the
appropriate App. The ME MDM App for Android 4.2 and above is designed
to manage KNOX devices. On choosing to download the appropriate App,
the user will be directed to the App's PlayStore page from which the
App can be downloaded.

Users will have to enter
the name of the certificate as ME
MDM and click OK

App can be downloaded by
clicking on Download

Once the download becomes
successful, users will have to click on the downloaded ME MDM App
to install it.

After the installation completes,
users should open the App.

Then
the users need to provide the One Time Password (OTP) or Active Directory/Azure credentials after opening the app. This depends on the authentication
type. If two factor authentication is enabled, then users will have
to provide both the OTP and the AD/Azure credentials.

Users should accept the
Terms and Conditions by clicking
Continue

Next, the users should enable
Device Administrator on their
mobile device and click Activate

Now, the users can see that
their devices have been enrolled successfully.

When a device gets enrolled, the user will receive an App Catalog from
where apps distributed through Mobile Device Manager Plus can
be installed. Administrators will also be notified that a new user has
enrolled the device. If any specific profiles or Apps were distributed
to the group where the device is enrolled, then the newly added device
will automatically receive all the applied profiles and distributed Apps.

ME MDM App icon will be listed on all enrolled mobile devices. By clicking
the MDM App icon, MDM App opens and the end user can see the distributed
Apps and associated profiles listed here. Profiles that are associated
to the devices will be listed under Policies and Restrictions. Device
Details will provide the complete information about the device.

Also, an exclusive KNOX container is created within the mobile device.
By clicking the KNOX container icon, the user can access the Policies
and Restrictions page on the Container. On clicking Create
KNOX Container, the user will be prompted to accept the Terms and
Conditions in the License Agreement. For Knox v1.0 devices, the downloading
process of KNOX Container will be initiated. This can take awhile and
then the user will be directed to set a Password for the Container. For
other KNOX devices, the user will be automatically directed to the Password
setting page. This password is used to unlock and access the KNOX Container
to view corporate resources. The user Apps that are distributed by Mobile
Device Manager Plusfor the KNOX container can be accessed by clicking
"Apps" icon within the container. By clicking the "Personal
home" icon, the user can exit the KNOX container and view the personal
data and apps in the device.

1.
What is Samsung KNOX?

Samsung KNOX is a suite of enhancements designed to address the security
problems in the current open source Android platform. Samsung KNOX offers
much enhanced security than SAFE devices and it is ideal for use in enterprises
that require high level security. It enables to secure and segregate the
personal and corporate data of users by creating an exclusive container
for corporate data. It also provides Application Security by allowing
the segregation of Apps for personal and corporate use.